CVE-2011-1338

Published: Jul 11, 2011Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item.

Affected (7)

Products: Xnview: Xnview

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Xnview Xnview	Up to 1.98
Xnview Xnview	Version 1.74
Xnview Xnview	Version 1.80.1
Xnview Xnview	Version 1.80.2
Xnview Xnview	Version 1.80.3
Xnview Xnview	Version 1.80
Xnview Xnview	Version 1.82

References (12)

http://jvn.jp/en/jp/JVN17844633/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2011-000050

Source: vultures@jpcert.or.jp

http://secunia.com/advisories/45127

Source: vultures@jpcert.or.jp

Vendor Advisory

http://www.osvdb.org/73619

Source: vultures@jpcert.or.jp

http://www.securityfocus.com/bid/48562

Source: vultures@jpcert.or.jp

https://exchange.xforce.ibmcloud.com/vulnerabilities/68369

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN17844633/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvndb.jvn.jp/jvndb/JVNDB-2011-000050

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/45127

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/73619

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/48562

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/68369

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.